Threeam Claims Attack on Brazil’s WS Group Brasil

Summary
Ransomware.live lists WS Group Brasil (ws[.]com[.]br) as a threeam claim dated June 12, 2026; the post alleges service disruption, which it says is unconfirmed.
Key points
- The ransomware.live record names WS Group Brasil, identified as ws[.]com[.]br, as the victim.
- The claim is attributed to ransomware actor threeam and linked to the actor’s leak-site listing.
- The post alleges disruption to the company’s systems and services, but says the information could not be confirmed.
Article Details
- Victim
- WS Group Brasil
- Victim Domain
- ws.com.br
- Encryption Status
- Unknown; not reported
- Exfiltration Status
- Unknown; not reported
- Leak Status
- Unverified group claim reported; no leak or publication status specified
